Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: FOJYp7okPbPXoC1oWKdOZCL5wq0g+9EDGOns5XeOwM4=
Subject key identifier: FA:85:9A:2A:57:30:30:C3:6C:9B:AE:C7:A5:E7:21:54:1A:66:EF:E3
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0194BCE0BECF5E9E39DFB6E4735F700D5E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 041C
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: eRwXi6qa9hbg+hjn704zj4ET7hb5VkXpEtU+c5sFdHY=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:be:cf:5e:9e:39:df:b6:e4:73:5f:70:0d:5e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=fa859a2a573030c36c9baec7a5e721541a66efe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:67:25:33:6a:3d:f8:d8:20:fd:20:13:7a:
c9:2e:39:42:a0:9b:71:e6:8b:d1:63:8a:df:a0:ce:
68:8b:85:3b:28:74:07:22:dd:80:f9:17:1e:47:bb:
dc:bc:15:ef:15:66:6c:90:3a:b1:bf:95:30:8e:19:
6b:df:c2:dc:d3:9d:f4:fa:7c:24:a7:8f:bf:ad:de:
4f:75:88:30:a9:64:8e:ab:6a:97:80:59:62:72:28:
72:87:ea:16:c1:15:3c:16:b5:f1:40:f8:d2:47:ee:
71:87:fe:f8:a4:95:a5:9d:33:74:f1:12:52:e3:2f:
0d:8e:7e:37:df:27:a2:e2:3f:45:a0:04:25:93:0c:
3d:ba:24:1b:7b:e7:6f:e7:ca:a7:7e:6c:a8:b4:97:
90:79:b0:93:8e:af:03:cd:a2:64:44:61:94:c7:5d:
99:8a:ac:55:ca:43:4e:b7:9a:a5:73:d5:1e:05:5b:
bc:4c:4d:97:d8:0a:d9:67:91:5d:6b:0c:29:f6:ef:
da:e1:96:62:f9:2a:bd:7f:9d:6d:5e:20:7e:ca:c3:
30:46:4f:16:2e:0e:98:65:a2:e1:49:8c:c3:c2:84:
5a:d8:9a:51:d4:63:5c:fb:92:7a:ec:12:6b:9d:ae:
49:3d:3e:f4:5b:d2:bc:48:c0:0c:a6:a4:68:51:f1:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:9A:2A:57:30:30:C3:6C:9B:AE:C7:A5:E7:21:54:1A:66:EF:E3
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:77:c2:13:21:06:de:61:35:6f:29:98:80:2b:c3:e0:47:9b:
61:71:e6:65:83:ff:10:60:b7:15:c2:e6:ea:62:05:47:e8:42:
41:e9:94:64:4e:55:5d:d3:80:f5:ac:17:07:fd:89:5b:24:d1:
1e:d9:38:81:35:79:d7:05:49:eb:b8:dc:29:3e:07:83:8d:99:
cf:4b:25:f6:31:43:d4:25:12:20:b8:7c:c0:9f:29:7b:e7:ec:
41:99:12:8c:0d:74:64:e3:ce:0e:30:b5:d1:17:a5:e3:f6:10:
fe:af:09:ab:6d:e1:2d:c4:8a:d6:75:8e:8c:2f:26:a6:52:51:
d3:73:18:c9:09:41:8f:48:ae:62:23:17:8c:a1:2c:62:70:71:
81:da:1e:b2:34:8b:74:69:52:02:1e:75:2e:47:39:be:a8:a5:
25:7e:bd:7c:f4:da:5f:4b:d4:43:90:d5:60:2c:4e:97:81:94:
8d:f1:10:cb:a6:7b:35:48:fb:2d:ad:bc:56:de:6e:ca:ce:7d:
bb:5a:af:6a:dc:94:2a:02:fb:80:c4:a3:0f:66:44:06:25:13:
95:30:c0:ca:90:77:39:57:fe:91:b1:8b:1d:92:4e:f3:d4:df:
dd:1d:13:ec:bf:0a:7e:8f:8f:f4:2c:04:40:0d:b3:5e:b0:9e:
e9:70:3c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84L7PXp4537bkc19wDV55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0
ODg5ZTAwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
EyhmYTg1OWEyYTU3MzAzMGMzNmM5YmFlYzdhNWU3MjE1NDFhNjZlZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulVnJTNqPfjYIP0gE3rJLjlCoJtx
5ovRY4rfoM5oi4U7KHQHIt2A+RceR7vcvBXvFWZskDqxv5Uwjhlr38Lc0530+nwk
p4+/rd5PdYgwqWSOq2qXgFlicihyh+oWwRU8FrXxQPjSR+5xh/74pJWlnTN08RJS
4y8Njn433yei4j9FoAQlkww9uiQbe+dv58qnfmyotJeQebCTjq8DzaJkRGGUx12Z
iqxVykNOt5qlc9UeBVu8TE2X2ArZZ5Fdawwp9u/a4ZZi+Sq9f51tXiB+ysMwRk8W
Lg6YZaLhSYzDwoRa2JpR1GNc+5J67BJrna5JPT70W9K8SMAMpqRoUfFRnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqFmipXMDDDbJuux6XnIVQaZu/jMB8GA1UdIwQY
MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et
MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz
LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXfCEyEG
3mE1bymYgCvD4EebYXHmZYP/EGC3FcLm6mIFR+hCQemUZE5VXdOA9awXB/2JWyTR
Htk4gTV51wVJ67jcKT4Hg42Zz0sl9jFD1CUSILh8wJ8pe+fsQZkSjA10ZOPODjC1
0Rel4/YQ/q8Jq23hLcSK1nWOjC8mplJR03MYyQlBj0iuYiMXjKEsYnBxgdoesjSL
dGlSAh51Lkc5vqilJX69fPTaX0vUQ5DVYCxOl4GUjfEQy6Z7NUj7La28Vt5uys59
u1qvatyUKgL7gMSjD2ZEBiUTlTDAypB3OVf+kbGLHZJO89Tf3R0T7L8Kfo+P9CwE
QA2zXrCe6XA8UQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:16 2025 by rpki-client